Google Cloud VMware Engine roles and permissions

This page lists the IAM roles and permissions for Google Cloud VMware Engine. To search through all roles and permissions, see the role and permission index .

Google Cloud VMware Engine roles

Role

Permissions

Vmwareengine Admin

( roles/ vmwareengine.admin )

Admin role for vmwareengine

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.*

vmwareengine.clusters.create
vmwareengine.clusters.delete
vmwareengine.clusters.get
vmwareengine. clusters. getIamPolicy
vmwareengine.clusters.list
vmwareengine. clusters. mountDatastore
vmwareengine. clusters. setIamPolicy
vmwareengine. clusters. unmountDatastore
vmwareengine.clusters.update
vmwareengine.datastores.create
vmwareengine.datastores.delete
vmwareengine.datastores.get
vmwareengine. datastores. getIamPolicy
vmwareengine.datastores.list
vmwareengine. datastores. setIamPolicy
vmwareengine.datastores.update
vmwareengine. dnsBindPermission. get
vmwareengine. dnsBindPermission. grant
vmwareengine. dnsBindPermission. revoke
vmwareengine.dnsForwarding.get
vmwareengine. dnsForwarding. update
vmwareengine. externalAccessRules. create
vmwareengine. externalAccessRules. delete
vmwareengine. externalAccessRules. get
vmwareengine. externalAccessRules. list
vmwareengine. externalAccessRules. update
vmwareengine. externalAddresses. create
vmwareengine. externalAddresses. delete
vmwareengine. externalAddresses. get
vmwareengine. externalAddresses. list
vmwareengine. externalAddresses. update
vmwareengine. hcxActivationKeys. create
vmwareengine. hcxActivationKeys. get
vmwareengine. hcxActivationKeys. getIamPolicy
vmwareengine. hcxActivationKeys. list
vmwareengine. hcxActivationKeys. setIamPolicy
vmwareengine.locations.get
vmwareengine.locations.list
vmwareengine. loggingServers. create
vmwareengine. loggingServers. delete
vmwareengine. loggingServers. get
vmwareengine. loggingServers. list
vmwareengine. loggingServers. update
vmwareengine. managementDnsZoneBindings. create
vmwareengine. managementDnsZoneBindings. delete
vmwareengine. managementDnsZoneBindings. get
vmwareengine. managementDnsZoneBindings. list
vmwareengine. managementDnsZoneBindings. repair
vmwareengine. managementDnsZoneBindings. update
vmwareengine. networkPeerings. create
vmwareengine. networkPeerings. createTagBinding
vmwareengine. networkPeerings. delete
vmwareengine. networkPeerings. deleteTagBinding
vmwareengine. networkPeerings. get
vmwareengine. networkPeerings. list
vmwareengine. networkPeerings. listEffectiveTags
vmwareengine. networkPeerings. listPeeringRoutes
vmwareengine. networkPeerings. listTagBindings
vmwareengine. networkPeerings. update
vmwareengine. networkPolicies. create
vmwareengine. networkPolicies. createTagBinding
vmwareengine. networkPolicies. delete
vmwareengine. networkPolicies. deleteTagBinding
vmwareengine. networkPolicies. fetchExternalAddresses
vmwareengine. networkPolicies. get
vmwareengine. networkPolicies. list
vmwareengine. networkPolicies. listEffectiveTags
vmwareengine. networkPolicies. listTagBindings
vmwareengine. networkPolicies. update
vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list
vmwareengine.nodes.get
vmwareengine.nodes.list
vmwareengine.operations.delete
vmwareengine.operations.get
vmwareengine.operations.list
vmwareengine. privateClouds. create
vmwareengine. privateClouds. createTagBinding
vmwareengine. privateClouds. delete
vmwareengine. privateClouds. deleteTagBinding
vmwareengine.privateClouds.get
vmwareengine. privateClouds. getIamPolicy
vmwareengine. privateClouds. list
vmwareengine. privateClouds. listEffectiveTags
vmwareengine. privateClouds. listTagBindings
vmwareengine. privateClouds. privateCloudDeletionNow
vmwareengine. privateClouds. resetNsxCredentials
vmwareengine. privateClouds. resetVcenterCredentials
vmwareengine. privateClouds. setIamPolicy
vmwareengine. privateClouds. showNsxCredentials
vmwareengine. privateClouds. showVcenterCredentials
vmwareengine. privateClouds. undelete
vmwareengine. privateClouds. update
vmwareengine. privateConnections. create
vmwareengine. privateConnections. createTagBinding
vmwareengine. privateConnections. delete
vmwareengine. privateConnections. deleteTagBinding
vmwareengine. privateConnections. get
vmwareengine. privateConnections. list
vmwareengine. privateConnections. listEffectiveTags
vmwareengine. privateConnections. listPeeringRoutes
vmwareengine. privateConnections. listTagBindings
vmwareengine. privateConnections. update
vmwareengine.projectState.get
vmwareengine.services.use
vmwareengine.services.view
vmwareengine.subnets.get
vmwareengine.subnets.list
vmwareengine.subnets.update
vmwareengine. vmwareEngineNetworks. create
vmwareengine. vmwareEngineNetworks. createTagBinding
vmwareengine. vmwareEngineNetworks. delete
vmwareengine. vmwareEngineNetworks. deleteTagBinding
vmwareengine. vmwareEngineNetworks. get
vmwareengine. vmwareEngineNetworks. list
vmwareengine. vmwareEngineNetworks. listEffectiveTags
vmwareengine. vmwareEngineNetworks. listTagBindings
vmwareengine. vmwareEngineNetworks. update

Vmwareengine Editor

( roles/ vmwareengine.editor )

Editor role for vmwareengine

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.clusters.create

vmwareengine.clusters.delete

vmwareengine.clusters.get

vmwareengine. clusters. getIamPolicy

vmwareengine.clusters.list

vmwareengine. clusters. mountDatastore

vmwareengine. clusters. unmountDatastore

vmwareengine.clusters.update

vmwareengine.datastores.create

vmwareengine.datastores.delete

vmwareengine.datastores.get

vmwareengine. datastores. getIamPolicy

vmwareengine.datastores.list

vmwareengine.datastores.update

vmwareengine. dnsBindPermission.*

vmwareengine. dnsBindPermission. get
vmwareengine. dnsBindPermission. grant
vmwareengine. dnsBindPermission. revoke

vmwareengine.dnsForwarding.*

vmwareengine.dnsForwarding.get
vmwareengine. dnsForwarding. update

vmwareengine. externalAccessRules.*

vmwareengine. externalAccessRules. create
vmwareengine. externalAccessRules. delete
vmwareengine. externalAccessRules. get
vmwareengine. externalAccessRules. list
vmwareengine. externalAccessRules. update

vmwareengine. externalAddresses.*

vmwareengine. externalAddresses. create
vmwareengine. externalAddresses. delete
vmwareengine. externalAddresses. get
vmwareengine. externalAddresses. list
vmwareengine. externalAddresses. update

vmwareengine. hcxActivationKeys. create

vmwareengine. hcxActivationKeys. get

vmwareengine. hcxActivationKeys. getIamPolicy

vmwareengine. hcxActivationKeys. list

vmwareengine.locations.*

vmwareengine.locations.get
vmwareengine.locations.list

vmwareengine.loggingServers.*

vmwareengine. loggingServers. create
vmwareengine. loggingServers. delete
vmwareengine. loggingServers. get
vmwareengine. loggingServers. list
vmwareengine. loggingServers. update

vmwareengine. managementDnsZoneBindings.*

vmwareengine. managementDnsZoneBindings. create
vmwareengine. managementDnsZoneBindings. delete
vmwareengine. managementDnsZoneBindings. get
vmwareengine. managementDnsZoneBindings. list
vmwareengine. managementDnsZoneBindings. repair
vmwareengine. managementDnsZoneBindings. update

vmwareengine. networkPeerings. create

vmwareengine. networkPeerings. delete

vmwareengine. networkPeerings. get

vmwareengine. networkPeerings. list

vmwareengine. networkPeerings. listEffectiveTags

vmwareengine. networkPeerings. listPeeringRoutes

vmwareengine. networkPeerings. listTagBindings

vmwareengine. networkPeerings. update

vmwareengine. networkPolicies. create

vmwareengine. networkPolicies. delete

vmwareengine. networkPolicies. fetchExternalAddresses

vmwareengine. networkPolicies. get

vmwareengine. networkPolicies. list

vmwareengine. networkPolicies. listEffectiveTags

vmwareengine. networkPolicies. listTagBindings

vmwareengine. networkPolicies. update

vmwareengine.nodeTypes.*

vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

vmwareengine.operations.*

vmwareengine.operations.delete
vmwareengine.operations.get
vmwareengine.operations.list

vmwareengine. privateClouds. create

vmwareengine. privateClouds. delete

vmwareengine.privateClouds.get

vmwareengine. privateClouds. getIamPolicy

vmwareengine. privateClouds. list

vmwareengine. privateClouds. listEffectiveTags

vmwareengine. privateClouds. listTagBindings

vmwareengine. privateClouds. privateCloudDeletionNow

vmwareengine. privateClouds. resetNsxCredentials

vmwareengine. privateClouds. resetVcenterCredentials

vmwareengine. privateClouds. showNsxCredentials

vmwareengine. privateClouds. showVcenterCredentials

vmwareengine. privateClouds. undelete

vmwareengine. privateClouds. update

vmwareengine. privateConnections. create

vmwareengine. privateConnections. delete

vmwareengine. privateConnections. get

vmwareengine. privateConnections. list

vmwareengine. privateConnections. listEffectiveTags

vmwareengine. privateConnections. listPeeringRoutes

vmwareengine. privateConnections. listTagBindings

vmwareengine. privateConnections. update

vmwareengine.projectState.get

vmwareengine.services.*

vmwareengine.services.use
vmwareengine.services.view

vmwareengine.subnets.*

vmwareengine.subnets.get
vmwareengine.subnets.list
vmwareengine.subnets.update

vmwareengine. vmwareEngineNetworks. create

vmwareengine. vmwareEngineNetworks. delete

vmwareengine. vmwareEngineNetworks. get

vmwareengine. vmwareEngineNetworks. list

vmwareengine. vmwareEngineNetworks. listEffectiveTags

vmwareengine. vmwareEngineNetworks. listTagBindings

vmwareengine. vmwareEngineNetworks. update

Vmwareengine Viewer

( roles/ vmwareengine.viewer )

Viewer role for vmwareengine

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.clusters.get

vmwareengine. clusters. getIamPolicy

vmwareengine.clusters.list

vmwareengine.datastores.get

vmwareengine. datastores. getIamPolicy

vmwareengine.datastores.list

vmwareengine. dnsBindPermission. get

vmwareengine.dnsForwarding.get

vmwareengine. externalAccessRules. get

vmwareengine. externalAccessRules. list

vmwareengine. externalAddresses. get

vmwareengine. externalAddresses. list

vmwareengine. hcxActivationKeys. get

vmwareengine. hcxActivationKeys. getIamPolicy

vmwareengine. hcxActivationKeys. list

vmwareengine.locations.*

vmwareengine.locations.get
vmwareengine.locations.list

vmwareengine. loggingServers. get

vmwareengine. loggingServers. list

vmwareengine. managementDnsZoneBindings. get

vmwareengine. managementDnsZoneBindings. list

vmwareengine. networkPeerings. get

vmwareengine. networkPeerings. list

vmwareengine. networkPeerings. listEffectiveTags

vmwareengine. networkPeerings. listPeeringRoutes

vmwareengine. networkPeerings. listTagBindings

vmwareengine. networkPolicies. fetchExternalAddresses

vmwareengine. networkPolicies. get

vmwareengine. networkPolicies. list

vmwareengine. networkPolicies. listEffectiveTags

vmwareengine. networkPolicies. listTagBindings

vmwareengine.nodeTypes.*

vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

vmwareengine.operations.get

vmwareengine.operations.list

vmwareengine.privateClouds.get

vmwareengine. privateClouds. getIamPolicy

vmwareengine. privateClouds. list

vmwareengine. privateClouds. listEffectiveTags

vmwareengine. privateClouds. listTagBindings

vmwareengine. privateConnections. get

vmwareengine. privateConnections. list

vmwareengine. privateConnections. listEffectiveTags

vmwareengine. privateConnections. listPeeringRoutes

vmwareengine. privateConnections. listTagBindings

vmwareengine.projectState.get

vmwareengine.services.view

vmwareengine.subnets.get

vmwareengine.subnets.list

vmwareengine. vmwareEngineNetworks. get

vmwareengine. vmwareEngineNetworks. list

vmwareengine. vmwareEngineNetworks. listEffectiveTags

vmwareengine. vmwareEngineNetworks. listTagBindings

VMware Engine Service Admin

( roles/ vmwareengine.vmwareengineAdmin )

Admin has full access to VMware Engine Service

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.clusters.*

vmwareengine.clusters.create
vmwareengine.clusters.delete
vmwareengine.clusters.get
vmwareengine. clusters. getIamPolicy
vmwareengine.clusters.list
vmwareengine. clusters. mountDatastore
vmwareengine. clusters. setIamPolicy
vmwareengine. clusters. unmountDatastore
vmwareengine.clusters.update

vmwareengine.datastores.*

vmwareengine.datastores.create
vmwareengine.datastores.delete
vmwareengine.datastores.get
vmwareengine. datastores. getIamPolicy
vmwareengine.datastores.list
vmwareengine. datastores. setIamPolicy
vmwareengine.datastores.update

vmwareengine. dnsBindPermission.*

vmwareengine. dnsBindPermission. get
vmwareengine. dnsBindPermission. grant
vmwareengine. dnsBindPermission. revoke

vmwareengine.dnsForwarding.*

vmwareengine.dnsForwarding.get
vmwareengine. dnsForwarding. update

vmwareengine. externalAccessRules.*

vmwareengine. externalAccessRules. create
vmwareengine. externalAccessRules. delete
vmwareengine. externalAccessRules. get
vmwareengine. externalAccessRules. list
vmwareengine. externalAccessRules. update

vmwareengine. externalAddresses.*

vmwareengine. externalAddresses. create
vmwareengine. externalAddresses. delete
vmwareengine. externalAddresses. get
vmwareengine. externalAddresses. list
vmwareengine. externalAddresses. update

vmwareengine. hcxActivationKeys.*

vmwareengine. hcxActivationKeys. create
vmwareengine. hcxActivationKeys. get
vmwareengine. hcxActivationKeys. getIamPolicy
vmwareengine. hcxActivationKeys. list
vmwareengine. hcxActivationKeys. setIamPolicy

vmwareengine.locations.*

vmwareengine.locations.get
vmwareengine.locations.list

vmwareengine.loggingServers.*

vmwareengine. loggingServers. create
vmwareengine. loggingServers. delete
vmwareengine. loggingServers. get
vmwareengine. loggingServers. list
vmwareengine. loggingServers. update

vmwareengine. managementDnsZoneBindings.*

vmwareengine. managementDnsZoneBindings. create
vmwareengine. managementDnsZoneBindings. delete
vmwareengine. managementDnsZoneBindings. get
vmwareengine. managementDnsZoneBindings. list
vmwareengine. managementDnsZoneBindings. repair
vmwareengine. managementDnsZoneBindings. update

vmwareengine.networkPeerings.*

vmwareengine. networkPeerings. create
vmwareengine. networkPeerings. createTagBinding
vmwareengine. networkPeerings. delete
vmwareengine. networkPeerings. deleteTagBinding
vmwareengine. networkPeerings. get
vmwareengine. networkPeerings. list
vmwareengine. networkPeerings. listEffectiveTags
vmwareengine. networkPeerings. listPeeringRoutes
vmwareengine. networkPeerings. listTagBindings
vmwareengine. networkPeerings. update

vmwareengine.networkPolicies.*

vmwareengine. networkPolicies. create
vmwareengine. networkPolicies. createTagBinding
vmwareengine. networkPolicies. delete
vmwareengine. networkPolicies. deleteTagBinding
vmwareengine. networkPolicies. fetchExternalAddresses
vmwareengine. networkPolicies. get
vmwareengine. networkPolicies. list
vmwareengine. networkPolicies. listEffectiveTags
vmwareengine. networkPolicies. listTagBindings
vmwareengine. networkPolicies. update

vmwareengine.nodeTypes.*

vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

vmwareengine.operations.*

vmwareengine.operations.delete
vmwareengine.operations.get
vmwareengine.operations.list

vmwareengine. privateClouds. create

vmwareengine. privateClouds. createTagBinding

vmwareengine. privateClouds. delete

vmwareengine. privateClouds. deleteTagBinding

vmwareengine.privateClouds.get

vmwareengine. privateClouds. getIamPolicy

vmwareengine. privateClouds. list

vmwareengine. privateClouds. listEffectiveTags

vmwareengine. privateClouds. listTagBindings

vmwareengine. privateClouds. resetNsxCredentials

vmwareengine. privateClouds. resetVcenterCredentials

vmwareengine. privateClouds. setIamPolicy

vmwareengine. privateClouds. showNsxCredentials

vmwareengine. privateClouds. showVcenterCredentials

vmwareengine. privateClouds. undelete

vmwareengine. privateClouds. update

vmwareengine. privateConnections.*

vmwareengine. privateConnections. create
vmwareengine. privateConnections. createTagBinding
vmwareengine. privateConnections. delete
vmwareengine. privateConnections. deleteTagBinding
vmwareengine. privateConnections. get
vmwareengine. privateConnections. list
vmwareengine. privateConnections. listEffectiveTags
vmwareengine. privateConnections. listPeeringRoutes
vmwareengine. privateConnections. listTagBindings
vmwareengine. privateConnections. update

vmwareengine.projectState.get

vmwareengine.services.*

vmwareengine.services.use
vmwareengine.services.view

vmwareengine.subnets.*

vmwareengine.subnets.get
vmwareengine.subnets.list
vmwareengine.subnets.update

vmwareengine. vmwareEngineNetworks.*

vmwareengine. vmwareEngineNetworks. create
vmwareengine. vmwareEngineNetworks. createTagBinding
vmwareengine. vmwareEngineNetworks. delete
vmwareengine. vmwareEngineNetworks. deleteTagBinding
vmwareengine. vmwareEngineNetworks. get
vmwareengine. vmwareEngineNetworks. list
vmwareengine. vmwareEngineNetworks. listEffectiveTags
vmwareengine. vmwareEngineNetworks. listTagBindings
vmwareengine. vmwareEngineNetworks. update

VMware Engine Service Privileged User

( roles/ vmwareengine.vmwareenginePrivilegedUser )

Privileged User has access to VMWare Engine Service Privileged API, including accelerating private cloud deletion.

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.clusters.delete

vmwareengine.clusters.get

vmwareengine. clusters. getIamPolicy

vmwareengine.clusters.list

vmwareengine.datastores.get

vmwareengine. datastores. getIamPolicy

vmwareengine.datastores.list

vmwareengine. dnsBindPermission. get

vmwareengine.dnsForwarding.get

vmwareengine. externalAccessRules. get

vmwareengine. externalAccessRules. list

vmwareengine. externalAddresses. get

vmwareengine. externalAddresses. list

vmwareengine. hcxActivationKeys. get

vmwareengine. hcxActivationKeys. getIamPolicy

vmwareengine. hcxActivationKeys. list

vmwareengine.locations.*

vmwareengine.locations.get
vmwareengine.locations.list

vmwareengine. loggingServers. get

vmwareengine. loggingServers. list

vmwareengine. managementDnsZoneBindings. get

vmwareengine. managementDnsZoneBindings. list

vmwareengine. networkPeerings. get

vmwareengine. networkPeerings. list

vmwareengine. networkPeerings. listEffectiveTags

vmwareengine. networkPeerings. listPeeringRoutes

vmwareengine. networkPeerings. listTagBindings

vmwareengine. networkPolicies. fetchExternalAddresses

vmwareengine. networkPolicies. get

vmwareengine. networkPolicies. list

vmwareengine. networkPolicies. listEffectiveTags

vmwareengine. networkPolicies. listTagBindings

vmwareengine.nodeTypes.*

vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

vmwareengine.operations.get

vmwareengine.operations.list

vmwareengine.privateClouds.get

vmwareengine. privateClouds. getIamPolicy

vmwareengine. privateClouds. list

vmwareengine. privateClouds. listEffectiveTags

vmwareengine. privateClouds. listTagBindings

vmwareengine. privateClouds. privateCloudDeletionNow

vmwareengine. privateConnections. get

vmwareengine. privateConnections. list

vmwareengine. privateConnections. listEffectiveTags

vmwareengine. privateConnections. listPeeringRoutes

vmwareengine. privateConnections. listTagBindings

vmwareengine.projectState.get

vmwareengine.services.*

vmwareengine.services.use
vmwareengine.services.view

vmwareengine.subnets.get

vmwareengine.subnets.list

vmwareengine. vmwareEngineNetworks. get

vmwareengine. vmwareEngineNetworks. list

vmwareengine. vmwareEngineNetworks. listEffectiveTags

vmwareengine. vmwareEngineNetworks. listTagBindings

VMware Engine Service Viewer

( roles/ vmwareengine.vmwareengineViewer )

Viewer has read-only access to VMware Engine Service

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine.clusters.get

vmwareengine. clusters. getIamPolicy

vmwareengine.clusters.list

vmwareengine.datastores.get

vmwareengine. datastores. getIamPolicy

vmwareengine.datastores.list

vmwareengine. dnsBindPermission. get

vmwareengine.dnsForwarding.get

vmwareengine. externalAccessRules. get

vmwareengine. externalAccessRules. list

vmwareengine. externalAddresses. get

vmwareengine. externalAddresses. list

vmwareengine. hcxActivationKeys. get

vmwareengine. hcxActivationKeys. getIamPolicy

vmwareengine. hcxActivationKeys. list

vmwareengine.locations.*

vmwareengine.locations.get
vmwareengine.locations.list

vmwareengine. loggingServers. get

vmwareengine. loggingServers. list

vmwareengine. managementDnsZoneBindings. get

vmwareengine. managementDnsZoneBindings. list

vmwareengine. networkPeerings. get

vmwareengine. networkPeerings. list

vmwareengine. networkPeerings. listEffectiveTags

vmwareengine. networkPeerings. listPeeringRoutes

vmwareengine. networkPeerings. listTagBindings

vmwareengine. networkPolicies. fetchExternalAddresses

vmwareengine. networkPolicies. get

vmwareengine. networkPolicies. list

vmwareengine. networkPolicies. listEffectiveTags

vmwareengine. networkPolicies. listTagBindings

vmwareengine.nodeTypes.*

vmwareengine.nodeTypes.get
vmwareengine.nodeTypes.list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

vmwareengine.operations.get

vmwareengine.operations.list

vmwareengine.privateClouds.get

vmwareengine. privateClouds. getIamPolicy

vmwareengine. privateClouds. list

vmwareengine. privateClouds. listEffectiveTags

vmwareengine. privateClouds. listTagBindings

vmwareengine. privateConnections. get

vmwareengine. privateConnections. list

vmwareengine. privateConnections. listEffectiveTags

vmwareengine. privateConnections. listPeeringRoutes

vmwareengine. privateConnections. listTagBindings

vmwareengine.projectState.get

vmwareengine.services.view

vmwareengine.subnets.get

vmwareengine.subnets.list

vmwareengine. vmwareEngineNetworks. get

vmwareengine. vmwareEngineNetworks. list

vmwareengine. vmwareEngineNetworks. listEffectiveTags

vmwareengine. vmwareEngineNetworks. listTagBindings

Service agent roles

Service agent roles should only be granted to service agents .

Role

Permissions

VMware Engine Service Agent

( roles/ vmwareengine.serviceAgent )

Gives permission to manage network configuration, such as establishing network peering, necessary for GCVE

compute.globalAddresses.get

compute.globalAddresses.list

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.list

compute. networks. listPeeringRoutes

compute.networks.removePeering

compute.networks.update

compute.networks.updatePeering

compute.networks.updatePolicy

compute.projects.get

compute.regionOperations.get

compute.routers.get

compute.routers.list

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

dns.changes.*

dns.changes.create
dns.changes.get
dns.changes.list

dns.dnsKeys.*

dns.dnsKeys.get
dns.dnsKeys.list

dns.gkeClusters.*

dns. gkeClusters. bindDNSResponsePolicy
dns. gkeClusters. bindPrivateDNSZone

dns.managedZoneOperations.*

dns.managedZoneOperations.get
dns.managedZoneOperations.list

dns.managedZones.create

dns.managedZones.delete

dns.managedZones.get

dns.managedZones.getIamPolicy

dns.managedZones.list

dns.managedZones.update

dns.networks.*

dns. networks. bindDNSResponsePolicy
dns. networks. bindPrivateDNSPolicy
dns. networks. bindPrivateDNSZone
dns. networks. targetWithPeeringZone
dns.networks.useHealthSignals

dns.policies.create

dns.policies.delete

dns.policies.get

dns.policies.list

dns.policies.listEffectiveTags

dns.policies.listTagBindings

dns.policies.update

dns.projects.get

dns.resourceRecordSets.*

dns.resourceRecordSets.create
dns.resourceRecordSets.delete
dns.resourceRecordSets.get
dns.resourceRecordSets.list
dns.resourceRecordSets.update

dns.responsePolicies.*

dns.responsePolicies.create
dns.responsePolicies.delete
dns.responsePolicies.get
dns.responsePolicies.list
dns.responsePolicies.update

dns.responsePolicyRules.*

dns.responsePolicyRules.create
dns.responsePolicyRules.delete
dns.responsePolicyRules.get
dns.responsePolicyRules.list
dns.responsePolicyRules.update

file.instances.get

file.instances.list

netapp.volumes.get

netapp.volumes.list

resourcemanager.projects.get

resourcemanager.projects.list

vmwareengine. externalAddresses. get

vmwareengine. externalAddresses. list

vmwareengine.nodes.*

vmwareengine.nodes.get
vmwareengine.nodes.list

Google Cloud VMware Engine permissions

Permission

Included in roles

`vmwareengine.clusters.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.clusters.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

`vmwareengine.clusters.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. clusters. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.clusters.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. clusters. mountDatastore`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. clusters. setIamPolicy`

Owner ( roles/ owner )

Security Admin ( roles/ iam.securityAdmin )

Vmwareengine Admin ( roles/ vmwareengine.admin )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. clusters. unmountDatastore`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.clusters.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.datastores.create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.datastores.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.datastores.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. datastores. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.datastores.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. datastores. setIamPolicy`

Owner ( roles/ owner )

Security Admin ( roles/ iam.securityAdmin )

Vmwareengine Admin ( roles/ vmwareengine.admin )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.datastores.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. dnsBindPermission. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. dnsBindPermission. grant`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. dnsBindPermission. revoke`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.dnsForwarding.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. dnsForwarding. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAccessRules. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAccessRules. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAccessRules. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. externalAccessRules. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. externalAccessRules. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAddresses. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAddresses. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. externalAddresses. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

Service agent roles

VMware Engine Service Agent ( roles/ vmwareengine.serviceAgent )

`vmwareengine. externalAddresses. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

Service agent roles

VMware Engine Service Agent ( roles/ vmwareengine.serviceAgent )

`vmwareengine. externalAddresses. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. hcxActivationKeys. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. hcxActivationKeys. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. hcxActivationKeys. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. hcxActivationKeys. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. hcxActivationKeys. setIamPolicy`

Owner ( roles/ owner )

Security Admin ( roles/ iam.securityAdmin )

Vmwareengine Admin ( roles/ vmwareengine.admin )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.locations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.locations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. loggingServers. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. loggingServers. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. loggingServers. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. loggingServers. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. loggingServers. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. managementDnsZoneBindings. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. managementDnsZoneBindings. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. managementDnsZoneBindings. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. managementDnsZoneBindings. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. managementDnsZoneBindings. repair`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. managementDnsZoneBindings. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPeerings. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPeerings. createTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPeerings. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPeerings. deleteTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPeerings. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPeerings. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPeerings. listEffectiveTags`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPeerings. listPeeringRoutes`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPeerings. listTagBindings`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPeerings. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPolicies. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPolicies. createTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPolicies. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPolicies. deleteTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. networkPolicies. fetchExternalAddresses`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPolicies. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPolicies. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPolicies. listEffectiveTags`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPolicies. listTagBindings`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. networkPolicies. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.nodeTypes.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.nodeTypes.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.nodes.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

Service agent roles

VMware Engine Service Agent ( roles/ vmwareengine.serviceAgent )

`vmwareengine.nodes.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

Service agent roles

VMware Engine Service Agent ( roles/ vmwareengine.serviceAgent )

`vmwareengine.operations.delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.operations.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.operations.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. createTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. deleteTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.privateClouds.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. getIamPolicy`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. listEffectiveTags`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. listTagBindings`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateClouds. privateCloudDeletionNow`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

`vmwareengine. privateClouds. resetNsxCredentials`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. resetVcenterCredentials`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. setIamPolicy`

Owner ( roles/ owner )

Security Admin ( roles/ iam.securityAdmin )

Vmwareengine Admin ( roles/ vmwareengine.admin )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. showNsxCredentials`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. showVcenterCredentials`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. undelete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateClouds. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateConnections. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateConnections. createTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateConnections. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateConnections. deleteTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. privateConnections. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateConnections. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateConnections. listEffectiveTags`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateConnections. listPeeringRoutes`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateConnections. listTagBindings`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. privateConnections. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine.projectState.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.services.use`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

`vmwareengine.services.view`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.subnets.get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.subnets.list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine.subnets.update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. vmwareEngineNetworks. create`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. vmwareEngineNetworks. createTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. vmwareEngineNetworks. delete`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. vmwareEngineNetworks. deleteTagBinding`

Owner ( roles/ owner )

Tag User ( roles/ resourcemanager.tagUser )

Vmwareengine Admin ( roles/ vmwareengine.admin )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

`vmwareengine. vmwareEngineNetworks. get`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. vmwareEngineNetworks. list`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Security Admin ( roles/ iam.securityAdmin )

Security Reviewer ( roles/ iam.securityReviewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. vmwareEngineNetworks. listEffectiveTags`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. vmwareEngineNetworks. listTagBindings`

Owner ( roles/ owner )

Editor ( roles/ editor )

Viewer ( roles/ viewer )

Tag User ( roles/ resourcemanager.tagUser )

Tag Viewer ( roles/ resourcemanager.tagViewer )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

Vmwareengine Viewer ( roles/ vmwareengine.viewer )

DLP Organization Data Profiles Driver ( roles/ dlp.orgdriver )

DLP Project Data Profiles Driver ( roles/ dlp.projectdriver )

Security Auditor ( roles/ iam.securityAuditor )

Support User ( roles/ iam.supportUser )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

VMware Engine Service Privileged User ( roles/ vmwareengine.vmwareenginePrivilegedUser )

VMware Engine Service Viewer ( roles/ vmwareengine.vmwareengineViewer )

`vmwareengine. vmwareEngineNetworks. update`

Owner ( roles/ owner )

Editor ( roles/ editor )

Vmwareengine Admin ( roles/ vmwareengine.admin )

Vmwareengine Editor ( roles/ vmwareengine.editor )

VMware Engine Service Admin ( roles/ vmwareengine.vmwareengineAdmin )

Google Cloud VMware Engine roles and permissions Stay organized with collections Save and categorize content based on your preferences.